K0nserv

You make a good point, my comment above probably overstates things.

For sure sandboxing and isolation is feeling increasingly relevant regardless, but crypto theft is acting as a good sponge.

If the sole purpose of this hack was to steal cryptocurrency, a silver lining might be, as in many similar cases, that if you stay away from that particular dumpster fire you are probably okay. I mean there's still a reverse shell on your machine to fix, but at least nothing of value was lost.

Version 2.1.313 is also missing from the official VS Code marketplace (https://marketplace.visualstudio.com/items?itemName=anthropi...). This suggest to me that it was published and pulled, which means it was Antrophic that was hacked.

Version 2.1.313 is missing from the official Claude Code GitHub repo's CHANGELOG[0]. There's also no tag[1] for 2.1.313[1], but 2.1.312[2], and 2.1.314[3] exist.

0: https://github.com/anthropics/claude-code/blob/main/CHANGELO...

1: https://github.com/anthropics/claude-code/releases/tag/v2.1....

2: https://github.com/anthropics/claude-code/releases/tag/v2.1....

3: https://github.com/anthropics/claude-code/releases/tag/v2.1....

The US could make IDs free and then make election day a national holiday, in which case the resistance to ID requirements probably wouldn't be as strong. Currently voter ID laws will suppress voting, whereas the goal in a democracy should surely be that everyone has ample opportunity to vote and have their voice heard.

The compiler already does this.

Compare https://rust.godbolt.org/z/osMY8777W and https://rust.godbolt.org/z/azGjbbzc8. I'm not sure why the inlining doesn't happen in the case when we do use the Debug implementation though.

I was under the impression the underlying issue has been patched. If it hasn't, this page and their initial blog post seem irresponsible. If it has indeed been patch why not provide a detailed write up?

I've been reading Steven Pinker's "The Sense of Style". Unlike "The Elements of Style", which is fine, it does a good job anchoring its suggestion in first principals. I do think I need to read a book on grammar to truly appreciate it though.

"On Writing" is another book like "The Elements of Style", both are too prescriptive, albeit not useless.

The one thing you'd expect on a website like this: how the exploit works, is missing.

The entire thing feels like marketing.

Even outside of the current administration, isn't BLS data notorious for being adjusted after the fact, often downwards? Basing reporting on fresh BLS data seems ill-advised.

I have a slightly different take on the loss of changelogs, although I agree with the version in this post.

My gripe[0] is developers using GitHub’s “releases” feature in lieu of a CHANGELOG.md. This feels particularly pertinent in light of GitHub’s recent performance woes.

0: https://hugotunius.se/2024/01/20/stop-using-github-releases....

The critique is more that the average, or at least loud, C programmer is resistant to fixing these problems (for example via Rust) and often arrogantly claim it's just a skill issue.

With the exception of the C++ case, these all seem to result in DDOS which, while bad, are barely security issues. It speaks to the difference between C and these other languages (Go, Python, Rust).

It's because everything Republicans say is projection. They want to cheat, so accuse the Democrats of doing it first. In actuality it's the current admin that's laying gound-work for election fraud in November.

Looks beautiful, congrats on the launch! I've been looking for a replacement for my Apple Magic keyboard. I would love to buy one, but ISO layout is a must for me, also would like blank or swappable keycaps.

I'm taking a slightly different approach. I've started a project where I intentionally don't use agentic coding. I use LLMs for researcher and to learn, but write all the code by hand.

The goal is to maintain the taste, for lack of a better word, that I've developed over decades of programming.

Claude put me on to the concept "Étude", so I've taken to calling it my Étude project.

Who is in charge of certifying implementers? What happens when I provide an implementation and don't verify anything at all?

How does this work if you use Linux or Graphene OS?

I don't want the market solving this. If we are going to do age checks it should be based on public key cryptography, be open source, and handled by the government. You verify with the government (or don't since they already know your age), you get some form of cryptographic attestation, present said attestation to websites/apps.

I'm not a fan of age verification in the first place, but I am extremely not a fan of random third parties doing the verifying.

Do all the writing yourself, use LLMs for research and as an editor only. When using an LLM as an editor never copy its verbatim suggestion into your prose.

> One sufficient policy would be to price everything in money + co2 equivalent currency. Every person in a country gets a certain co2 currency budget per year. Pretty simple actually (yeah yeah, the small print will still be long but the gist is simple).

Just having a carbon tax, that accurately prices the cost of carbon, is enough. It's one of the few taxes that has broad support among economists. However in a democracy like the US I don't see how it ever gets implemented and even if it does, it will get ripped up 2-4 years later.

Even if you are correct, in practice there's no way to put this particularly genie back in the bottle. It's the same as trying to argue that we should solve our energy problems by asking people to consume less energy. Outside of some climate dictatorship, it's not happening.

Also, on travel, I think there's a lot to be said for the value of travel and being exposed to other cultures and societies. "Travel is fatal to prejudice, bigotry, and narrow-mindedness[..]" and all that.

Yeah fair, having experienced Japanese trains I fully agree about the comfort. I'm not arguing that we shouldn't build high speed rail and try to shift more travel to trains instead of aviation either to be clear. I love trains and I especially love Shinkansen style trains, but aviation still has a big edge in big parts of the world and on some journey lengths.

I was saying a bit of both. megablast is correct that there are alternatives, but I'd maybe quibble with "viable". For example you can get from Stockholm to Umeå with a 1 hour flight or a 6-8 hour train journey, is the train a viable alternative? For aviation there aren't alternative fuels and on many journeys even the alternative transport options aren't in the same ballpark.

Flying is a bit unique in that there aren't really viable alternatives. It also accounts for a fairly small portion of emissions. Land transport (cars and trucks), power generation, and heating are where the big wins exist with viable alternatives.

7+ years ago GPT2 couldn’t be released because it was deemed too dangerous[0]. It was, of course, eventually released.

0: https://openai.com/index/better-language-models/

I don't usually check in compiled artifacts myself.

I feel it's a faux pas to pass off work entirely or partially done with AI as your own. I make sure I leave those lines in specifically for that reason.

I'm not saying "never use C". The thing I dislike is the false dichotomy between "(Zig|C|Go) is simple unlike Rust, which is complex". A statement like that makes it sound like writing correct code in the former is easier when it's, in fact harder.

Of course Rust has a few footguns too, that's not my point.